Which class of applications security threads does HTTP header manipulation reside?

In which class of applications security threads does HTTP header manipulation reside?
A. Session management
B. Parameter manipulation
C. Software tampering
D. Exception managements